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Abstract 

The design of new quantum algorithms has proven to be an extremely 
difficult task. This paper considers a different approach to the problem. 
We systematically study 'quantum state generation', namely, which super- 
positions can be efficiently generated. We first show that all problems in 



Statistical Zero Knowledge (SZK), a class which contains many languages 
that are natural candidates for BQP, can be reduced to an instance of quan- 
'. turn state generation. This was known before for graph isomorphism, but 

we give a general recipe for all problems in SZK. We demonstrate the re- 
duction from the problem to its quantum state generation version for three 
examples: Discrete log, quadratic residuosity and a gap version of closest 
vector in a lattice. 

We then develop tools for quantum state generation. For this task, we 
define the framework of 'adiabatic quantum state generation' which uses 



the language of ground states, spectral gaps and Hamiltonians instead of 
the standard unitary gate language. This language stems from the recently 
qh suggested adiabatic computation model [20] and seems to be especially tai- 

lored for the task of quantum state generation. After defining the paradigm, 
we provide two basic lemmas for adiabatic quantum state generation: 

• The Sparse Hamiltonian lemma, which gives a general technique for 
implementing sparse Hamiltonians efficiently, and, 

• The jagged adiabatic path lemma, which gives conditions for a sequence 
of Hamiltonians to allow efficient adiabatic state generation. 

We use our tools to prove that any quantum state which can be gen- 
erated efficiently in the standard model can also be generated efficiently 
adiabatically, and vice versa. Finally we show how to apply our techniques 
to generate superpositions corresponding to limiting distributions of a large 
class of Markov chains, including the uniform distribution over all perfect 
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matchings in a bipartite graph and the set of all grid points inside high di- 
mensional convex bodies. These final results draw an interesting connection 
between quantum computation and rapidly mixing Markov chains. 



1 Introduction 

Quantum computation carries the hope of solving in quantum polynomial time classi- 
cally intractable tasks. The most notable success so far is Shor's quantum algorithm 
for factoring integers and for finding the discrete log Following Shor's algo- 

rithm, several other algorithms were discovered, such as Hallgren's algorithm for 
solving Pell's equation [2E], Watrous's algorithms for the group black box model |4"5] , 
and the Legendre symbol algorithm by Van Dam et al |14j . Except for j!4j . all of 
these algorithms fall into the framework of the Hidden subgroup problem, and in fact 
use exactly the same quantum circuitry; The exception, j!4j . is a different algorithm 
but also heavily uses Fourier transforms and exploits the special algebraic structure 
of the problem. Recently, a beautiful new algorithm by Childs et. al. [TU] was found, 
which gives an exponential speed up over classical algorithms using an entirely dif- 
ferent approach, namely quantum walks. The algorithm however, works in the black 
box model and solves a fairly contrived problem. 

One cannot overstate the importance of developing qualitatively different quan- 
tum algorithmic techniques and approaches for the development of the field of quan- 
tum computation. In this paper we attempt to make a step in that direction by 
approaching the issue of quantum algorithms from a different point of view. 

It has been folklore knowledge for a few years already that the problem of graph 
isomorphism, which is considered classically hard [33] has an efficient quantum algo- 
rithm as long as a certain state, namely the superposition of all graphs isomorphic 
to a given graph, 



can be generated efficiently by a quantum Turing machine (for simplicity, we ignore 
normalizing constants in the above state and in the rest of the paper). The reason 
that generating \ac) suffices is very simple: For two isomorphic graphs, these states 
are identical, whereas for two non isomorphic graphs they are orthogonal. A simple 
circuit can distinguish between the case of orthogonal states and that of identical 
states, where the main idea is that if the states are orthogonal they will prevent the 
different states of a qubit attached to them to interfere. One is tempted to assume 
that such a state, \qg), is eas Y to construct since the equivalent classical distribution, 
namely the uniform distribution over all graphs isomorphic to a certain graph, can be 
sampled from efficiently. Indeed, the state \(5q) = J2 aeSn \o) ® \a{G)) can be easily 
generated by this argument; However, it is a curious (and disturbing) fact of quantum 
mechanics that though \/3q) is an easy state to generate, so far no one knows how to 
generate \olq) efficiently, because we cannot forget the value of \a). 




(1) 



2 



In this paper we systematically study the problem of quantum state generation. 
We will mostly be interested in a restricted version of state generation, namely gen- 
erating states corresponding to classical probability distributions, which we loosely 
refer to as quantum sampling (or Qsampling) from a distribution. To be more specific, 
we consider the probability distribution of a circuit, Dq , which is the distribution 
over the outputs of the classical circuit C when its inputs are uniformly distributed. 

Denote \C) = f Xl 2 e{o i} m V ' Dc{z) \z). We define the problem of circuit quantum 
sampling: 

Definition 1. Circuit Quantum Sampling (CQS): 

Input: (e, C ) where C is a description of a classical circuit from n to m bits, and 
0<e<|. 

Output: A description of a quantum circuit Q of size poly (|C|) such that \Q(\0)) — 
\C)\<e. 

We first show that most of the quantum algorithmic problems considered so far 
can be reduced to quantum sampling. Most problems that were considered good can- 
didates for BQP, such as discrete log (DLOG), quadratic residuosity, approximating 
closest and shortest vectors in a lattice, graph isomorphism and more, belong to the 
complexity class statistical zero knowledge, or SZK (see section El for background.) 
We prove 

Theorem 1. Any £ 6 SZK (Statistical Zero Knowledge) can be reduced to a family 
of instances of CQS. 

The proof relies on a reduction by Sahai and Vadhan j^U] from SZK to a complete 
problem called statistical difference. Theorem ^ shows that a general solution for 
quantum sampling would imply SZK C BQP. We note that there exists an oracle 
A relative to which SZK A (jL BQP A £Q , and so such a proof must be non relativizing. 

Theorem ^translates a zero knowledge proof into an instance of CQS. In general, 
the reduction can be quite involved, building on the reduction in |40j . Specific exam- 
ples of special interest turn out to be simpler, e.g., for the case of graph isomorphism 
described above, the reduction results in a circuit Gq that gets as an input a uni- 
formly random string and outputs a uniformly random graph isomorphic to G. In 
section [2] we demonstrate the reduction for three interesting decision vari- 

ant of DLOG (based on a zero knowledge proof of Goldreich and Kushilevitz [21]), 
quadratic residuosity (based on a zero knowledge proof of Goldwasser, Micali and 
Rackoff [21]) and approximating the closest vector problem in lattices (based on a 
zero knowledge proof of Goldreich and Goldwasser 22\). The special cases reveal 
that although quite often one can look at the zero knowledge proof and directly infer 
the required state generation, sometimes it is not obvious such a transition exists at 
all. Theorem Q however, tells us such a reduction is always possible. 

The problem of what states can be generated efficiently by a quantum computer 
is thus of critical importance to the understanding of the computational power of 
quantum computers. We therefore embark on the task of designing tools for quantum 
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state generation, and studying which states can be generated efficiently. The recently 
suggested framework of adiabatic quantum computation [2II| seems to be tailored 
exactly for this purpose, since it is stated in terms of quantum state generation; Let 
us first explain this framework. 

Recall that the time evolution of a quantum system's state \ip(t)) is described by 
Schrodinger's equation: 

zhj t \m) = H(t)\m)- (2) 

where H(t) is an operator called the Hamiltonian of the system. We will consider 
systems of n qubits; H is then taken to be local, i.e. a sum of operators, each 
operating on a constant number of qubits. This captures the physical restriction 
that interactions in nature involve only a small number of particles, and means that 
the Hamiltonian H{t) can actually be implemented in the lab. Adiabatic evolution 
concerns the case in which H(t) varies very slowly in time; The qualitative statement 
of the adiabatic theorem is that if the quantum system is initialized in the ground 
state (the eigenstate with lowest eigenvalue) of H(0), and if the modification of H 
in time is done slowly enough, namely adiabatically, then the final state will be the 
ground state of the final Hamiltonian H(T). 

Recently, Farhi, Goldstone, Gutmann and Sipser [20] suggested to use adiabatic 
evolutions to solve iVP-hard languages. It was shown in ITo] that such adiabatic 
evolutions can be simulated efficiently on a quantum circuit, and so designing such a 
successful process would imply a quantum efficient algorithm for the problem. Farhi 
et. a/.'s idea was to find the minimum of a given function / as follows: H(0) is chosen 
to be some generic Hamiltonian. H(T) is chosen to be the problem Hamiltonian, 
namely a matrix which has the values of / on its diagonal and zero everywhere else. 
The system is then initialized in the ground state of H(0) and evolves adiabatically on 
the convex line H(t) = (1 — ^)H + j;Ht- By the adiabatic theorem if the evolution 
is slow enough, the final state will be the groundstate of H(T) which is exactly the 
sought after minimum of /. 

The efficiency of these adiabatic algorithms is determined by how slow the adi- 
abatic evolution needs to be for the adiabatic theorem to hold. It turns out that 
this depends mainly on the spectral gaps of the Hamiltonians H(t). If these spectral 
gaps are not too small, the modification of the Hamiltonians can be done 'fairly fast', 
and the adiabatic algorithm then becomes efficient. The main problem in analyzing 
the efficiency of adiabatic algorithms is thus lower bounding the spectral gap; This 
is a very difficult task in general, and hence not much is known analytically about 
adiabatic algorithms. ^3 analyze numerically the performance of adiabatic 

algorithms on random instances of NP complete problems. It was proven in ^SJ EH] 
that Grover's quadratic speed up can be achieved adiabatically. Lower bounds 
for special cases were given in In [2] it was shown that adiabatic evolution 

with local Hamiltonians is in fact equivalent in computational power to the standard 
quantum computation model. 

In this paper, we propose to use the language of Adiabatic evolutions, Hamilto- 
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nians, ground states and spectral gaps as a theoretical framework for quantum state 
generation. Our goal is not to replace the quantum circuit model, neither to im- 
prove on it, but rather to develop a paradigm, or a language, in which quantum state 
generation can be studied conveniently. The advantage in using the Hamiltonian 
language is that the task of quantum state generation becomes much more natural, 
since adiabatic evolution is cast in the language of state generation. Furthermore, 
as we will see, it seems that this language lends itself more easily than the standard 
circuit model to developing general tools. 

In order to provide a framework for the study of state generation using the adi- 
abatic language, we define adiabatic quantum state generation as general as we can. 
Thus, we replace the requirement that the Hamiltonians are on a straight line, with 
Hamiltonians on any general path. Second, we replace the requirement that the 
Hamiltonians are local, with the requirement that they are simulatable, i.e., that 
the unitary matrix e~ ltH ^ can be approximated by a quantum circuit to within any 
polynomial accuracy for any polynomially bounded time t. Thus, we still use the 
standard model of quantum circuits in our paradigm. However, our goal is to derive 
quantum circuits solving the state generation problem, from adiabatic state gener- 
ation algorithms. Indeed, any adiabatic state generator can be simulated efficiently 
by a quantum circuit. We give two proofs of this fact. The first proof follows from 
the adiabatic theorem. The second proof is self contained, and does not require 
knowledge of the adiabatic theorem. Instead it uses the simple Zeno effect |SH], thus 
providing an alternative point of view of adiabatic algorithms using measurements 
(Such a path was taken also in This implies that adiabatic state generators can 

be used as a framework for designing algorithms for quantum state generation. 

We next describe two basic and general tools for designing adiabatic state gener- 
ators. The first question that one encounters is naturally, what kind of Hamiltonians 
can be used. In other words, when is it possible to simulate, or implement, a Hamil- 
tonian efficiently. To this end we prove the sparse Hamiltonian lemma which gives 
a very general condition for a Hamiltonian to be simulatable. A Hamiltonian H on 
n qubits is row-sparse if the number of non-zero entries at each row is polynomially 
bounded. H is said to be row-computable if there exists a (quantum or classical) ef- 
ficient algorithm that given i outputs a list (j, Hi J) running over all non zero entries 
Hi j. As a norm for Hamiltonians we use the spectral norm, i.e. the operator norm 
induced by the I2 norm on states. 

Lemma 1. (The sparse Hamiltonian lemma). If H is a row-sparse, row- 
computable Hamiltonian on n qubits and \ \H\ \ < poly(n), then H is simulatable. 

We note that this general lemma is useful also in two other contexts: first, in the 
context of simulating complicated physical systems on a quantum circuit. Second, 
for continuous quantum walks ^3] which use Hamiltonians. For example, in ^Uj 
Hamiltonians are used to derive an exponential quantum speed up using quantum 
walks. Our lemma can be used directly to simplify the Hamiltonian implementation 
used in [TU] and to remove the unnecessary constraints (namely coloring of the nodes) 
which were assumed for the sake of simulating the Hamiltonian. 
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The next question that one encounters in designing adiabatic quantum state gen- 
eration algorithms concerns bounding the spectral gap, which as we mentioned before 
is a difficult task. We would like to develop tools to find paths in the Hamiltonian 
space such that the spectral gaps are guaranteed to be non negligible, i.e. larger than 
l/poly(n). Our next lemma provides a way to do this in certain cases. Denote a(H) 
to be the ground state of H (if unique.) 

Lemma 2. (The Jagged Adiabatic Path lemma). Let {Hj}?~l° lv ^ be a se- 
quence of simulatable Hamiltonians on n qubits, all with polynomially bounded norm, 
non-negligible spectral gaps and with groundvalues 0, such that the inner product be- 
tween the unique ground states oe(Hj) and ot(Hj + i) is non negligible for all j. Then 
there is an efficient quantum algorithm that takes a(H ) to within arbitrarily small 
distance from ol(Ht)- 

To prove this lemma, the naive idea is to use the sequence of Hamiltonians as 
stepping stones for the adiabatic computation, connecting Hj to Hj +1 by a straight 
line to create the path H(t). However this way the spectral gaps along the way might 
be small. Instead we use two simple ideas, which we can turn into two more useful 
tools for manipulating Hamiltonians for adiabatic state generation. The first idea is 
to replace each Hamiltonian Hj by the Hamiltonian n#. which is the projection on 
the subspace orthogonal to the ground states of Hj. We show how to implement these 
projections using Kitaev's phase estimation algorithm [32] • The second useful idea is 
to connect by straight lines projections on states with non negligible inner product. 
We show that the Hamiltonians on such a line are guaranteed to have non negligible 
spectral gap. These ideas can be put together to show that the jagged adiabatic path 
connecting the projections Uhj is guaranteed to have sufficiently large spectral gap. 

We use the above tools to show that 

Theorem 2. Any quantum state that can be efficiently generated in the circuit model, 
can also be efficiently generated by an adiabatic state generation algorithm, and vice 
versa. 

Thus the question of the complexity of quantum state generation is equivalent 
(up to polynomial terms) in the circuit model and in the adiabatic state generation 
model. 

In the final part of the paper we demonstrate how our methods for adiabatic quan- 
tum state generation work in a particularly interesting domain, namely Qsampling 
from the limiting distributions of Markov chains. There is an interesting connec- 
tion between rapidly mixing Markov chains and adiabatic computation. A Markov 
chain is rapidly mixing if and only if the second eigenvalue gap, namely the difference 
between the largest and second largest eigenvalue of the Markov matrix M, is non 
negligible [3]. This clearly bears resemblance to the adiabatic condition of a non 
negligible spectral gap, and suggests to look at Hamiltonians of the form 

H M = I- M. (3) 
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H M will be a Hamiltonian if M is symmetric; if M is not symmetric but is a 
reversible Markov chain [33] we can still define the Hamiltonian corresponding to it 
(see section [H] ) The sparse Hamiltonian lemma has as an immediate corollary that 
for a special type of Markov chains, which we call strongly samplable, the quantum 
analog of the Markov chain can be implemented: 

Corollary 1. If M is a strongly samplable Markov chain, then H M is simulatable. 

In adiabatic computation one is interested in sequences of Hamiltonians; We thus 
consider sequences of strongly samplable Markov chains. There is a particularly 
interesting paradigm in the study of Markov chains where sequences of Markov chains 
are repeatedly used: Approximate counting [SO] . In approximate counting the idea 
is to start from a Markov chain on a set that is easy to count, and which is contained 
in a large set Q the size of which we want to estimate; One then slowly increases 
the set on which the Markov chain operates so as to finally get to the desired set 
Q. This paradigm and modifications of it, in which the Markov chains are modified 
slightly until the desired Markov chain is attained, are a commonly used tool in 
many algorithms; A notable example is the recent algorithm for approximating the 
permanent [2331 • ^ n the ^ as ^ P ar ^ °f the paper we show how to use our techniques 
to translate such approximate counting algorithms in order to quantum sample from 
the limiting distributions of the final Markov chain. We show: 

Theorem 3. (Loosely:) Let A be an efficient randomized algorithm to approximately 
count a set Q, possibly with weights; Suppose A uses slowly varying Markov chains 
starting from a simple Markov chain. Then there is an efficient quantum algorithm 
Q that Qsamples from the final limiting distribution over Q. 

We stress that it is NOT the case that we are interested in a quantum speed up 
for sampling from various distributions but rather we are interested in the coherent 
Qsample of the classical distribution. 

We exploit this paradigm to Qsample from the set of all perfect matchings of 
a bipartite graph, using the recent algorithm by Jerrum, Sinclair and Vigoda j2H]- 
Using the same ideas we can also Qsample from all linear extensions of partial or- 
ders, using Bubley and Dyer algorithm [Hj, from all lattice points in a convex body 
satisfying certain restrictions using Applegate-Kannan technique [U] and from many 
more states. We note that some of these states (perhaps all) can be generated using 
standard techniques which exploit the self reducibility of the problem (see [27)). We 
stress however that our techniques are qualitatively and significantly different from 
previous techniques for generating quantum states, and in particular do not require 
self reducibility. This can be important for extending this approach to other quantum 
states. 

In this paper we have set the grounds for the general study of the problem of 
Qsampling and adiabatic quantum state generation, where we have suggested to 
use the language of Hamiltonians and ground states for quantum state generation. 
This direction points at very interesting and intriguing connections between quantum 
computation and many different areas: the complexity class SZK and its complete 
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problem statistical difference |1U], the notion of adiabatic evolution [21], the study 
of rapidly mixing Markov chains using spectral gaps [33] 5 quantum walks [TO], and 
the study of ground states and spectral gaps of Hamiltonians in Physics. Hopefully, 
these connections will point at various techniques from these areas which can be bor- 
rowed to give more tools for adiabatic quantum state generation; Notably, the study 
of spectral gaps of Hamiltonians in physics is a lively area with various recently de- 
veloped techniques (see ]12] and references therein). It seems that a much deeper 
understanding of the adiabatic paradigm is required, in order to solve the most in- 
teresting open question, namely to design interesting new quantum algorithms. An 
open question which might help in the task is to present known quantum algorithms, 
eg. Shor's DLOG algorithm, or the quadratic residuosity algorithm, in the language 
of adiabatic computation, in an insightful way. 

The rest of the paper is organized as follows. We start with the results related to 
SZK; We then describe quantum adiabatic computation, define the adiabatic quan- 
tum state generation framework, and use the adiabatic theorem to prove that an 
adiabatic state generator implies a state generation algorithm. Next we prove our 
two main tools: the sparse Hamiltonian lemma, and the jagged adiabatic path lemma. 
We then use these tools to prove that adiabatic state generation is equivalent to stan- 
dard quantum state generation. Finally we draw the connection to Markov chains 
and demonstrate how to use our techniques to Qsample from approximately count- 
able sets. In the appendix we give the second proof of transforming adiabatic state 
generators to algorithms using the Zeno effect. 

2 Qsampling and SZK 

We start with some background about Statistical Zero Knowledge. For an excellent 
source on this subject, see Vadhan's thesis jH] or Sahai and Vadhan |iU] . 

2.1 SZK 

A pair n = (ny es ,IIvo) is a promise problem if Hy es ^ {0, 1}*, Uno ^ {0, 1}* and 
Hy es H Uno = 0- We look at Hy es as the set of all yes instances, IIvo as the set of 
all no instances and we do not care about all other inputs. If every x 6 {0, 1}* is in 
Hyes U Uno w e call n a language. 

We say a promise problem n has an interactive proof with soundness error e s and 
completeness error e c if there exists an interactive protocol between a prover P and 
a verifier V denoted by (P, V), where V is a probabilistic polynomial time machine, 
and 

• If x G Hy es V accepts with probability at least 1 — e c . 

• If x G Uno then for every prover P*, V accepts with probability at most e s . 

When an interactive proof system (n, V) for a promise problem n is run on an 
input x, it produces a distribution over "transcripts" that contain the conversation 



8 



between the prover and the verifier. I.e., each possible transcript appears with some 
probability (depending on the random coin tosses of the prover and the verifier). 

An interactive proof system (II, V) for a promise problem IT is said to be "honest 
verifier statistical zero knowledge", and in short HVSZK, if there exists a probabilistic 
polynomial time simulator S that for every x G Ily es produces a distribution on 
transcripts that is close (in the l\ distance defined below) to the distribution on 
transcripts in the real proof. If the simulated distribution is exactly the correct 
distribution, we say the proof system is "honest verifier perfect zero knowledge, and 
in short HVPZK. 

We stress that the simulator's output is based on the input alone, and the sim- 
ulator has no access to the prover. Also, note that we only require the simulator 
to produce a good distribution on inputs in Ily es , and we do not care about other 
inputs. This is because for "No" instances there is no correct proof anyway. We refer 
the interested reader to Vadhan's thesis jH] for rigorous definitions and a discussion 
of their subtleties. 

The definition of HVSZK captures exactly the notion of "zero knowledge"; If 
the honest verifier can simulate the interaction with the prover by himself, in case 
the input is in II, then he does not learn anything from the interaction (except 
for the knowledge that the input is in II). We denote by HVSZK the class of all 
promise problems that have an interactive proof which satisfies these restrictions. 
One can wonder whether cheating verifiers can get information from an honest prover 
by deviating from the protocol. Indeed, in some interactive proofs this happens. 
However, a general result says that any HVSZK proof can be simulated by one which 
does not leak much information even with dishonest verifiers [23]. We thus denote 
by SZK the class of all promise problems which have interactive proof systems which 
are statistically zero knowledge against an honest (or equivalently a general) verifier. 

It is known that BPP C SZK C AM n coAM and that SZK is closed under 
complement. It follows that SZK does not contain any NP-complete language unless 
the polynomial hierarchy collapses. For this, and other results known about this 
elegant class, we refer the reader, again, to Vadhan's thesis [44J. 

2.2 The complete problem 

Recently, Sahai and Vadhan found a natural complete problem for the class Statistical 
Zero Knowledge, denoted by SZK. One nice thing about the problem is that it does 
not mention interactive proofs in any explicit or implicit way. We need some facts 
about distances between distributions in order to define the problem. For two classical 
distributions {p(x)}, {q(x)} define their t\ distance and their fidelity (this measure is 
known by many other names as well): 




X 



X 
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We also define the variation distance to be \\p — q\\ = \\p — q\i so that it is a value 
between and 1. The following fact is very useful: 

Fact 1. (See ^Tj) 

1-F(p,q)< \\p-q\\ < ^l-F{p,qY 

or equivalently 

1-||P-?||< F(p,q) < y/1 - \\p- q\\ 2 
We can now define the complete problem for SZK: 
Definition 2. Statistical Difference (SD^p) 
Input : Two classical circuits Cq, C\ with m Boolean outputs. 
Promise : \\D Co — D Cl \ | > a. or \ \D Co — D Cl | | < (3. 

Output : Which of the two possibilities occurs? (yes for the first case and no for 
the second) 

Sahai and Vadhan [JUJ HI] show that for any two constants < (3 < a < 1 such 
that even a 2 > j3, SD a ^ is complete for SZK 1 . A well explained exposition can also 
be found in 

2.3 Reduction from SZK to Qsampling. 

We need a very simple building block. 

Claim 1. Let ip = -^(|0, v) + \l,w)). If we apply a Hadamard gate on the first qubit 
and measure it, we get the answer with probability 1+Real (( v \ w )) an d \ w nJi probability 

1- Real({v\w)) 
2 

The proof is a direct calculation. We now proceed to prove Theorem ^ 

Proof. Let Co, C\ be an input to SD, Co, C\ are circuits with m outputs. It is enough 
to show that SDy^/i G BQP, given that we can Qsample from the given circuits. 
Let us first assume that we can Qsample from both circuits with e = error. We 
can therefore generate the superposition ^(|0) \Co) + |1) \C\)). We then apply a 
Hadamard gate on the first qubit and measure it. We use Claim[Uwith v = \Cq) and 
w = \Ci). In our case 

(v\w)= V / D Co (z)D Ci (z) = F(D Cq ,D Co ) (4) 

ze{o,i} m 

We therefore get with probability 1+F ( D co> D co\ Thus, 

^ahai and Vadhan also show, ( 1441 . Proposition 4.7.1) that any promise problem in HVPZK reduces to SD 1 /2fi> 
where the line above the class denotes complement, i.e., we swap between the yes and no instances. 



10 



• If \\Dc — Dd\\ > oc, then we measure with probability 1+F( - D ^o' D co^ < 

• If \\Dco — Dd\\ < /3, then we measure with probability 1+F(D ^°' gCo) > 

2-||£> Co -D Cl || 1 _ £ 
2 — 1 2 ' 

Setting a = | and /? = | we get that if \\D Co — D Cl \\ > a we measure with 
probability at most 1+v ^ < 0.831, while if ||D Co - £>cj| < /? 

we measure with 

probability at least 1 — | > ~ = 0.875. Repeating the experiment 0(log(|)) times, we 
can decide on the right answer with error probability smaller than 5. If the quantum 
sampling circuit has a small error (say e < then the resulting states are close to 
the correct ones and the error introduced can be swallowed by the gap of the BQP 
algorithm. □ 

The above theorem shows that in order to give an efficient quantum algorithm 
for any problem in SZK, it is sufficient to find an efficient quantum sampler from 
the corresponding circuits. One can use the theorem to start from a zero knowledge 
proof for a certain language, and translate it to a family of circuits which we would 
like to Qsample from. Sometimes this reduction can be very easy, without the need 
to go through the complicated reduction of Sahai and Vadhan 4CT, but in general 
we do not know that the specification of the states is easy to derive. For the sake 
of illustration, we give the exact descriptions of the states required to Qsample from 
for three examples, in which the reduction turns out to be much simpler than the 
general case. These cases are of particular interest for quantum algorithms: discrete 
log, quadratic residuosity and a gap version of Closest vector in a lattice. 



2.4 A promise problem equivalent to Discrete Log 
The problem : 

Goldreich and Kushilevitz j2I] define the promise problem DLP C as: 

• Input: A prime p, a generator g of Z* and an input y G Z*. 

• Promise: The promise is that x = log (y) is in [1, cp] U [~ + 1, | + cp], 

• Output: Whether x G [1, cp] or x G [| + 1, | + cp] 

fTI\ proves that DLOG is reducible to DLP C for every < c < 1/2. They also 
prove that DLP C has a perfect zero knowledge proof if < c < 1/6. We take c = 1/6 
and show how to solve DLPi/§ with CQS. 

The reduction : 

We assume we can solve the construction problem for the circuit C y> k = Cn,a,j/,fe 
that computes Cy^{i) = y ■ g l (modp) for i G {0, l} fe . The algorithm gets into 
the state 4=[ |0) \C gP /2+i |_io g (p)j-i) + |1) \C y [iog(p)j-3) ] an d proceeds as in Claim 
□ 
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Correctness 

We have: 



^ 2'-l 

|C p p/2+i,Liog(p)J-i> = "7p k P/2+l ) ( 5 ) 
where t is the largest power of 2 smaller than p. Also, as y = g x we have 

2 t'-i 

|Cy,Lio B WJ-3> = -LEIO ( 6 ) 

V ^ i=0 

where i' is the largest power of 2 smaller than p/8. Now, comparing the powers 
of g in the support of Equations and El we see that 

• If x G [l,cp] then |C ff p/2+i,iio g (p)J-i) an d |Cj/,Liog(p)J-3) nave disjoint supports 
and therefore <C y; [log^j -3I 5 L io g ( P )j - 1 > I = °> while, 

• If x G [f +1, |+cp] then the overlap is large and | (C^Liog(p)j-3|^/2+i,Lio g (p)j-i) | 
is a constant. 

2.5 Quadratic residuosity 
The problem : 

we denote xRn if x = y 2 (modn) for some y, and xNn otherwise. The problem 
QR is to decide on input x, n whether xRn. An efficient algorithm is known for 
the case of n being a prime, and the problem is believed to be hard for n = pq 
where p, q are chosen at random among large primes p and q. A basic fact, that 
follows directly from the Chinese remainder theorem is 

Fact 2. 

• If the prime factorization of n is n = p^p^ 2 ■ ■ ■ p1 k , then for every x 

xRn Vi<i<A; xRpi 

• If the prime factorization of n is n = pip 2 ■ ■ - Pk then every z G Z n that has 
a square root, has the same number of square roots. 

We show how to reduce the n = pq case to the CQS (adopting the zero knowledge 
proof of El). 

The reduction : We use the circuit C a {r) that on input r G Z n outputs z = 
r 2 a ( mod n) . Suppose we know how to quantum sample C a for every a. On input 
integers n, x, (n,x) = 1, the algorithm gets into the state 771 [|0) \Ci) + |1) \C X )} 
and proceeds as in Claim [T] 
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Correctness : 

We have 

K) = £VEI*> (7) 

z 

where p z = Pr r (z = r 2 x), and 

|Ci> = E a ^> ( g ) 

z:zRn 

for some fixed a independent of z. 

• If xRn then 2; = r 2 x is also a square. Furthermore, as (x, n) = 1 we have 
p 2 = Pr r (r is a square root of -) and as every square has the same number 
of square roots, we conclude that \C X ) = |Ci) and (C X \C\) = 1. 

• Suppose xNn. There are only p + q — 1 integers r £ Z n that are not co-prime 
to n. For every r co-prime with n, z = xr 2 must be a non-residue (or else 
xRn as well). We conclude that ^ z . zRn Pz < ~ and so (C x \Ci) 0. 

We note that for a general n, different elements might have a different number of 
solutions (e.g., try n = 8) and the number of elements not co-prime to n might 
be large, so one has to be more careful. 

2.6 Approximating CVP 

We describe here the reduction to quantum sampling for a gap problem of CVP 
(closest vector in a lattice), which builds upon the statistical zero knowledge proof 
of Goldreich and Goldwasser (221- A lattice of dimension n is represented by a basis, 
denoted B, which is an n x n non-singular matrix over KL The lattice C(B) is the set 
of points J0(B) = {Be \ c e Z n }, i.e., all integer linear combinations of the columns 
of B. The distance rf(t>i,f 2 ) between two points is the Euclidean distance £2- The 
distance between a point v and a set A is d(v,A) = min a6j 4 d(v, a). We also denote 
\\S\ \ the length of the largest vector of the set S. The closest vector problem, CVP, 
gets as input an n-dimensional lattice B and a target vector v G M n . The output 
should be the point b G C(B) closest to v. The problem is NP hard. Furthermore, it 
is NP hard to approximate the distance to the closest vector in the lattice to within 
small factors, and it is easy to approximate it to within 2 en factor, for every e > 0. 
See (22] for a discussion. In [22] an (honest prover) perfect zero knowledge proof for 
being far away from the lattice is given. We now describe the promise problem. 

The problem : 

• Input: An n-dimensional lattice B, a vector «6l" and designated distance 
d. We set g = g(n) = \/ cl ™ n , for some c > 0. 
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• Promise: Either d(v, C(B)) < d or d(v , C(B) > g • d. 

• Output: Which possibility happens. 

We let H t denote the sphere of all points in W 1 of distance at most t from the 
origin. 

The reduction : The circuit Co gets as input a random string, and outputs the 
vector r + r], where r is a uniformly random point in H 2 n\\Bu{v}\\ r\C(B) and r\ is 
a uniformly random point f] G Hs_. d . [22] explain how to sample such points with 
almost the right distribution, i.e. they give a description of an efficient such Co- 

We remark that the points cannot be randomly chosen from the real (continu- 
ous) vector space, due to precision issues, but [22j show that taking a fine enough 
discrete approximation and a large enough cutoff of the lattice results in an ex- 
ponentially small error. ^From now on we work in the continuous world, bearing 
in mind that in fact everything is implemented in a discrete approximation of it. 

Now assume we can quantum sample from the circuit Cq. We can then also 
quantum sample from the circuit C v which we define to be the same circuit 
except that the outputs are shifted by the vector v and become r + r\ + v. To 
solve the gap problem the algorithm gets into the state [ |0) |C ) + |1) \C\) } 
and proceeds as in Claim ^ 

Correctness : 

If v is far away from the lattice C(B), then the calculation at [22J shows that 
the states |C ) and \Ci) have no overlap and so (C \Ci) = 0. 

On the other hand, suppose v is close to the lattice, d(v, C(B)) < d. Notice that 
the noise rj has magnitude about gd, and so the spheres around any lattice point 
r and around r+v have a large overlap. Indeed, the argument of |22] shows that 
if we express |C ) = J2 z Pz \ z ) anc ^ = J2 z P'z \ z ) then \p—p'\\ < l — n~ 2c . We 
see that (Cq\C\) = F(p,p') > n~ 2c . Iterating the above poly{n) times we get an 
RQP algorithm, namely a polynomial quantum algorithm with one sided error. 



3 Physics Background 

This section gives background required for our definition of adiabatic state genera- 
tion. We start with some preliminaries regarding the operator norm and the Trotter 
formula. We then describe the adiabatic theorem, and the model of adiabatic com- 
putation as defined in [271] . 
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3.1 Spectral Norm 



The operator norm of a linear transformation T, induced by the I2 norm is called the 
spectral norm and is defined by 

IITII l T ^l 

i = max — — - 

^0 \ip\ 

If T is Hermitian or Unitary (in general, if T is normal, namely commutes with its 
adjoint) than ||T|| equals the largest absolute value of its eigenvalues. If U is unitary, 
\\U\\ = 1. Also, ||AB|| < ||v4|| ■ ||5||. Finally, if A = (a id ) is a D x D matrix, then 
1 \A\ 1 < D 2 \ \A\ loo where | \A\ \ 00 = maxy |aij|. 

Definition 3. We say a linear transformation T 2 a -approximates a linear transfor- 
mation T\ if \\Ti — T2II < a, and if this happens we write T 2 = T\ + a. 

3.2 Trotter Formula 

Say H — Y] H m with each H m Hermitian. Trotter's formula states that one can 
approximate e~ ltH by slowly interleaving executions of e~ tHm . We use the following 
variant of it: 

Lemma 3. J^f Let Hi be Hermitian, H = Y^=\ E ™- Furth er assume H and Hi 
have bounded norm, \\H\\, \ \Hi\\ < A. Define 

U s — ^ e~ SiHl ■ e~ SiHi ■ ■ e~ SiHM ] ■ [ e~ SiHu ■ e~ SiHM ^ ■ ■ e~ SiHl ] 

Then \ \U 5 - e~ 2SiH \ \ < 0(M ■ (5A) 3 ). 

Using the 1 1 • 1 1 properties stated above we conclude: 

Corollary 2. Let Hi be Hermitian, H = ^ m=1 H m . Assume \ \H\\, \ \Hi\\ < A. Then, 
for every t > 

\\UF-e- itH \\ < 0(-^-z ■ M ■ (5A) 3 ) (9) 

As \\U 6 -I\\ < 2MA5 we also have \ \U^ 1 -U^\\< 2MAS and thus: 

Corollary 3. Let Hi be Hermitian, H = J2m=i H m - Assume \\H\\, \ \Hi\ \ < A. Then, 
for every t > 

II^J _ e -itH|| < 0(MA • 5 + MA 3 t ■ 5 2 ) (10) 

Notice that for every fixed t, M and A, the error term goes down to zero with S. 
In applications, we will pick 5 to be polynomially small, in such a way that the above 
error term is polynomially small. 
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3.3 Time Dependent Schrodinger Equation 

A quantum state \ip) of a quantum system evolves in time according to Schrodinger's 
equation: 

l hj t \m) = mm)) (ii) 

where H(t) is a Hermitian matrix which is called the Hamiltonian of the physical 
system. The evolution of the state from time to time T can be described by 
integrating Schrodinger's equation over time. If H is constant and independent of 
time, one gets 

\i>(T)) = U(T)\m) = e- iHT \m) (12) 
Since H is Hermitian e~ lHT is unitary, and so we get the familiar unitary evolution 
from quantum circuits. The time evolution is unitary regardless of whether H is time 
dependent or not. 

The groundstate of a Hamiltonian H is the eigenstate with the smallest eigenvalue, 
and we denote it by a(H). The spectral gap of a Hamiltonian H is the difference 
between the smallest and second to smallest eigenvalues, and we denote it by A(H). 



3.4 The adiabatic Theorem 

In the study of adiabatic evolution one is interested in the long time behavior (at large 
times T) of a quantum system initialized in the ground state of H at time when the 
Hamiltonian of the system, H(t) changes very slowly in time, namely adiabatically. 

The qualitative statement of the adiabatic theorem is that if the quantum system 
is initialized in the ground state of H(0), the Hamiltonian at time 0, and if the 
modification of H along the path H(t) in the Hamiltonian space is done infinitely 
slowly, then the final state will be the ground state of the final Hamiltonian H(T). 

To make this statement correct, we need to add various conditions and quantifi- 
cations. Historically, the first and simplest adiabatic theorem was found by Born 
and Fock in 1928 In 1958 Kato [3T] improved the statement to essentially the 
statement we use in this paper (which we state shortly), and which is usually referred 
to as the adiabatic theorem. A proof can be found in For more sophisticated 
adiabatic theorems see [7] and references therein. 

To state the adiabatic theorem, it is convenient and traditional to work with a 
re-scaled time s — ^ where T is the total time. The Schrodinger's equation restated 
in terms of the re-scaled time s then reads 

it£\4,(8))=T.H(8)\ll>(8)) (13) 

as 

where T = j- can be referred to as the delay schedule, or the total time. 

Theorem 4. (The adiabatic theorem, adapted from pn3[20j). Let H(-) be a 

function from [0, 1] to the vector space of Hamiltonians on n qubits. Assume H(-) is 
continuous, has a unique ground state, for every s G [0, 1], and is differentiable in all 
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but possibly finitely many points. Let e > and assume that the following adiabatic 
condition holds for all points s G (0, 1) in which the derivative is defined: 



Te > 




(14) 



Then, a quantum system that is initialized at time with the ground state a(H(0)) 
of H(0), and evolves according to the dynamics of the Hamiltonians H(-), ends up 
at re-scaled time 1 at a state that is within e c distance from a(H(l)) for some 

constant c > 0. 

We will refer to equation H3I as the adiabatic condition. 

The proof of the adiabatic theorem is rather involved. One way to get intuition 
about it is by observing how the Schrodinger equation behaves when eigenstates are 
considered; If the eigenvalue is A, the eigenstate evolves by a multiplicative factor e tXt , 
which rotates in time faster the larger the absolute value of the eigenvalue A is, and 
so the ground state rotates the least. The fast rotations are essentially responsible to 
the cancellations of the contributions of the vectors with the higher eigenvalues, due 
to interference effects. 

4 Adiabatic Quantum State Generation 

In this section we define our paradigm for quantum state generation, based on the 
ideas of adiabatic quantum computation (and the adiabatic theorem). We would like 
to allow as much flexibility as possible in the building blocks. We therefore allow 
any Hamiltonian which can be implemented efficiently by quantum circuits. We also 
allow using general Hamiltonian paths and not necessarily straight lines. We define: 

Definition 4. (Simulatable Hamiltonians). We say a Hamiltonian H onn qubits 
is simulatable if for every t > and every accuracy < a < 1 the unitary transfor- 
mation 



can be approximated to within a accuracy by a quantum circuit of size poly (n,t, 1/a). 

If H is simulatable, then by definition so is cH for any < c < poly(n). It therefore 
follows by Trotter's equation (JHJ) that any convex combination of two simulatable, 
bounded norm Hamiltonians is simulatable. Also, If H is simulatable and U is a 
unitary matrix that can be efficiently applied by a quantum circuit, then UHU^ is 
also simulatable, because e - ltUHU ' < = Ue~ ltH W. 

We note that these rules cannot be applied unboundedly many times in a recursive 
way, because the simulation will then blow up. The interested reader is referred to 
P?l ITU] for a more complete set of rules for simulating Hamiltonians. 

We now describe an adiabatic path, which is an allowable path in the Hamiltonian 
space: 



U(t) = e 



-mt 



(15) 
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Definition 5. (Adiabatic path). A function H from s G [0, 1] to the vector space 
of Hamiltonians on n qubits, is an adiabatic path if 

• H(s) is continuous, 

• H(s) is differentiable except for finitely many points, 

• Vs H(s) has a unique groundstate, and 

• Vs, H(s) is simulatable given s. 

The adiabatic theorem tells us that the time evolution of a system evolving along 
the adiabatic path will end with the final ground state, if done slowly enough, namely 
when the adiabatic condition holds. Adiabatic quantum state generation is basically 
the process of implementing the Schrodinger's evolution along an adiabatic path, 
where we require that the adiabatic condition holds. 

Definition 6. (Adiabatic Quantum State Generation). An adiabatic Quantum 
State Generator (H x (s),T, e) has for every x G {0, l} n an adiabatic path H x (s), such 
that for the given T, e the adiabatic condition is satisfied for all s G [0, 1] where it 
is defined. We also require that the generator is explicit, i.e., that there exists a 
polynomial time quantum machine that 

• On input x G {0, 1}™ outputs a(H x (0)), the groundstate of H x (0), and, 

• On input x G {0, l} n , s G [0, 1] and 5 > outputs a circuit C x (s) approximating 

e —iSH x (s) 

We then say the generator adiabatically generates a(H x (l)). 

Remark: We note that in previous papers on adiabatic computation, eg. in [IS], a 
delay schedule r(s) which is a function of s was used. We chose to work with one 
single delay parameter, T, instead, which might seem restrictive; However, working 
with a single parameter does not restrict the model since more complicated delay 
schedules can be encoded into the dependence on s. 

We will show that every adiabatic quantum state Generator can be efficiently 
simulated by a quantum circuit, in Claim El We later on prove the other direction 
of Claim El which implies Theorem [21 which shows the equivalence in computational 
power of quantum state generation in the standard and in the adiabatic frameworks. 
Thus, designing state generation algorithms in the adiabatic paradigm indeed makes 
sense since it can be simulated efficiently on a quantum circuit, and we do not lose 
in computational power by moving to the adiabatic framework and working only 
with ground states. The advantage in working in the adiabatic model is that the 
language of this paradigm seems more adequate for developing general tools. After 
the statement and proof of Claim El we proceed to prove several such basic tools. 
Once we develop these tools, we will be able to prove the other direction of the 
equivalence theorem and apply the tools for generating interesting states. 
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4.1 Circuit simulation of adiabatic state generation 

An adiabatic state generator can be simulated efficiently by a quantum circuit: 

Claim 2. (Circuit simulation of adiabatic state generation). Let (H x (s),T,e) 
be an Adiabatic Quantum State Generator. Assume T < poly(n). Then, there exists 
a quantum circuit that on input x generates the state a(H x (l)) to within e accuracy, 
with size poly(T, l/e,n). 

Proof. (Based on Adiabatic Theorem) The circuit is built by discretizing time 
to sufficiently small intervals of length 5, and then applying the unitary matrices 
e -iH(Sj)s_ Intuitively this should work, as the adiabatic theorem tells us that a phys- 
ical system evolving for time T according to Schrodinger's equation with the given 
adiabatic path will end up in a state close to a(H x (l)). The formal error analysis 
can be done by exactly the same techniques that were used in [T^]. We do not give 
the details of the proof based on the adiabatic theorem here, since the proof of the 
adiabatic theorem itself is hard to follow. □ 

We give a second proof of Claim |21 The proof does not require knowledge of the 
adiabatic theorem. Instead, it relies on the Zeno effect and due to its simplicity, 
we can give it in full details. We include it in order to give a self contained proof of 
Claim |2l and also because we believe it gives a different, illuminating perspective on 
the adiabatic evolution from the measurement point of view. We note that another 
approach toward the connection between adiabatic computation and measurements 
was taken in ^T]. The full Zeno based proof appears in Appendix EI Here we give a 
sketch. 

Proof. (Based on the Zeno effect) As before, we begin at the state a(H(0)), and 
the circuit is built by discretizing time to sufficiently small intervals of length 5. At 
each time step j, j = 1, . . . , R, instead of simulating the Hamiltonian as before we 
apply a measurement determined by H(sj). Specifically, we measure the state in a 
basis which includes the groundstate a(H(sj)). If R is sufficiently large, the subse- 
quent Hamiltonians are very close in the spectral norm, and the adiabatic condition 
guarantees that their groundstates are very close in the Euclidean norm. Given that 
at time step j the state is the groundstate a(H(sj)), the next measurement results 
with very high probability in a projection on the new groundstate a(H(sj + i)). The 
Zeno effect guarantees that the error probability behaves like 1/R 2 , i.e. quadratically 
in R (and not linearly), and so the accumulated error after R steps is still small, 
which implies that the probability that the final state is the groundstate of H(l) is 
very high, if R is taken to be large enough. □ 

5 The Sparse Hamiltonian Lemma 

Our first concern is which Hamiltonians can be simulated efficiently. We restate the 
sparse Hamiltonian lemma: 
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Lemma ^ The sparse Hamiltonian lemma If H is a row-sparse, row- computable 
Hamiltonian on n qubits and \ \H\\ < poly(n) then H is simulatable. 

The main idea of the proof is to explicitly write if as a sum of polynomially many 
bounded norm Hamiltonians H m which are all block diagonal (in a combinatorial 
sense) and such that the size of the blocks in each matrix is at most 2x2. We then 
show that each Hamiltonian H m is simulatable and use Trotter's formula to simulate 
H. 

5.1 The reduction to 2 x 2 combinatorially block diagonal matrices. 

Let us define: 

Definition 7. (Combinatorial block.) Let A be a matrix with rows ROWS(A) and 
columns COLS(A). We say (R,C) C ROWS (A) x COLS(A) is a combinatorial 
block if \R\ = \C\, for every c G C , r G" R, A(c,r) = 0, and for every c G" C , r G R, 
A(c,r) = 0. 

A is block diagonal in the combinatorial sense iff there is some renaming of the 
nodes under which it becomes block diagonal in the usual sense. Equivalently, A 
is block diagonal in the combinatorial sense iff there is a decomposition of its rows 
into ROW S(A) = Uf=i Rb, and of its columns COLS (A) = U&Li Cb such that for 
every b, (Rb, Cb) is a combinatorial block. We say A is 2 x 2 combinatorially block 
diagonal, if each combinatorial block (Rb, Cb) is at most 2x2, i.e., for every b either 
I -Rb I = = 1 or \Rf)\ — \Cb\ — 2. 

Claim 3. (Decomposition lemma). Let H be a row-sparse, row- computable Hamil- 
tonian over n qubits, with at most D non-zero elements in each row. Then there is a 
way to decompose H into H = Y^m=i ™ H m where: 

• Each H m is a row-sparse, row- computable Hamiltonian over n qubits, and, 

• Each H m is 2 x 2 combinatorially block diagonal. 

Proof. (Of ClaimEI) We color all the entries of H with (D + l) 2 ra 6 colors. For (i,j) G 
[N] x [N] and i < j (i.e., (i,j) is an upper-diagonal entry) we define: 

coln(i,j) = (k , i mod k , j mod k , rindexn(i, j) , cindexn(i, j)) (16) 

where 

• If i — j we set k = 1, otherwise we let k be the first integer in the range [2..n 2 ] 
such that i ^ j(modk), and we know there must be such a k. 

• If Hij = we set rindexn(i, j) = 0, otherwise we let rindexn(i, j) be the index 
of in the list of all non-zero elements in the i'th row of H. cindexn^, j) is 
similar, but with regard to the columns of H. 



20 



For lower-diagonal entries, i > j, we define colff(i,j) = coIh{j, i)- Altogether, we use 
(n 2 ) 3 ■ (D + l) 2 colors. 

For a color m, we define H m [i,j] = H[i,j] ■ o~ C oi H {i,j),m, i-e., H m is H on the entries 
colored by m and zero everywhere else. Clearly, H = J2 m ^ m anc ^ eacn ^ s 
Hermitian. Also as H is row-sparse and row-computable, there is a simple poly(n)- 
time classical algorithm computing the coloring coln(i,j), and so each H m is also 
row-computable. It is left to show that it is 2 x 2 combinatorially block- diagonal. 

Indeed, fix a color m. Let us order all the upper-triangular, non-zero elements of 
H m in a list NON ZERO m = \ H m (i,j) ^ and i < j}. Say the elements of 

NONZERO m are {(h,ji), . . . , {%b,3b)}- For ever y element (i b ,j b ) e NON ZERO m 
we introduce a block. If 4 = % then we set R b = C b = {i b } while if i b ^ j b then we 
set R b = C b = {i b ,j b }. 

Say ib 7^ j;, (the i b = j b case is similar and simpler). As the color m contains the 
row-index and column- index of (i b ,j b ), it must be the case that (i b ,j b ) is the only 
element in NON ZERO m from that row (or column). Furthermore, as i b mod k ^ 
j b mod k, and both k, i mod k and j mod k are included in the color m, it must be 
the case that there are no elements in NON ZERO m that belong to the j b row or i b 
column (see Figured)). It follows that (R b ,C b ) is a block. We therefore see that H m 
is 2 x 2 combinatorially block-diagonal as desired. □ 




Figure 1: In the upper diagonal side of the matrix H m : the row and column of (i b ,jb) are empty 
because the color m contains the row-index and column index of and the jb 'th row and ib 'th 

column are empty because m contains k, i mod k, j mod k and i mod k ^= j mod k. The lower 
diagonal side of H m is just a reflection of the upper diagonal side. It follows that {ib, jb} is a 2 x 2 
combinatorial block. 



Claim 4. For every m, \\H m \ \ < \ \H\\. 

Proof. Fix an m. H m is combinatorially block diagonal and therefore its norm ||-ff m || 
is achieved as the norm of one of its blocks. Now, H m blocks are either 

• lxl, and then the block is (H^) for some i, and it has norm \H iti \, or, 

• 2 x 2, and then the block is ( ^ ] for some k, £, and has norm |^4j^|. 

V A k,£ U / 

It follows that max m ||-ff OT || < max^ \ Hk^\. On the other hand \\H\\ > max^ \H^\. 
The proof follows. □ 



21 



5.2 2x2 combinatorially block diagonal matrices are simulatable. 



Claim 5. Every 2x2 combinatorially block diagonal, row- computable Hamiltonian 
A is simulatable to within arbitrary polynomial approximation. 

Proof. Let t > and a > an accuracy parameter. 

The circuit : 

A is 2 x 2 combinatorially block diagonal. It therefore follows that A's action 
on a given input |/c) is captured by a 2 x 2 unitary transformation U k . Formally, 
given k, say \k) belongs to a 2 x 2 block {k,£} in A. We set b k = 2 (for a 
2x2 block) and min^ = min(k,£), m&x k = max(k,£) (for the subspace to 
which k belongs). We then set A k to be the part of A relevant to this subspace 



A k = 



A 



A 



A A 

^maxkiirnink ^max^^max^ 



and U k = e itAk . If \k) belongs to a 1 x 1 block 

we similarly define b k = 1, min fc = max k = k, A k = (A k)k ) and U k = (e~ ttAk ). 

Our approximated circuit simulates this behavior. We need two transformations. 
We define 



7\:|£;,0> 



b k , min k , max k , A k , U k , k 



where A k is our approximation to the entries of A k and U k is our approximation 
to e~ ttAk , and where both matrices are expressed by their four (or one) entries. 
We use accuracy. 

Having U k ,min k ,max k , k written down, we can simulate the action of U k . We 
can therefore have an efficient unitary transformation T^. 



To 



U k , min k , max k ) \v 



U k ,min k ,max k ) 



U k v 



for \v) G Span{min k ,max k }. 

Our algorithm is applying T\ followed by T2 and then T-f 1 for cleanup. 

Correctness : Let us denote DIFF = e~ %tA — T^T 2 Ti. Our goal is to show that 
||Diff|| < a. We notice that Diff is also 2x2 block diagonal, and therefore its 
norm can be achieved by a vector ip belonging to one of its dimension one or two 
subspaces, say to Span{min k ,max k }. Let U k \ip) = a\min k ) + j3\max k ) and 
U k \ip) = a \min k ) + (5 \max k ). We see that: 



Ti 
T 2 



b k , min k , max k , A k , U k , tp 
b k , min k , max k , A k , U k , U k ip 
a b k ,min k ,max k ,A k ,U k ,min k )+P 

a \min k , 0) + (3 \max k , 0) 



b k , min k , max k , A k , U k , max k 
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where the first equation holds since it holds for jmin^), \maxk) and by linearity 
it holds for the whole subspace spanned by them. We conclude that |Diff \ = 
\(Uk — Uk) | and so ||Diff|| = max^. — U^W- However, by our construction, 
\\A k — AfcHoo < and so ||[/& — £4|| < a as desired. 

□ 

We proved the claim for matrices with 2x2 combinatorial blocks. We remark 
that the same approach works for matrices with mxm combinatorial blocks, as long 
as m is polynomial in n. 

5.3 Proving the sparse Hamiltonian lemma 

We now prove the sparse Hamiltonian Lemma: 

Proof. (Of Lemma [I]) Let H be row-sparse with D < poly(n) non-zero elements in 
each row, and \\H\\ = A < poly(ri). Let t > 0. Our goal is to efficiently simulate 
e -itH ^ Q within a accuracy. 

We express H = J2 m =i H m as in Claim El M < (D + l) 2 n 6 < poly(n). We choose 
A such that 0(MtA 3 A 2 ) < |. Note that ^ < poly(t,n) for some large enough 

polynomial. By Claim we can simulate in polynomial time each e~ lAHm to within 

t 

2M °/ A accuracy. We then compute U^ A , using our approximations to e~ lAHm , as 
in Corollary El Corollary El assures us that our computation is a close to e~ ltH , as 
desired (suing the fact that for every m, ||-Hm|| — \\H\ \ = A < poly(n)). The size of 
the computation is ^ • 2M ■ poly (A, M, n, a) = poly(n, t, a) as required. □ 

6 The Jagged Adiabatic Path Lemma 

Next we consider the question of which paths in the Hamiltonian space guarantee 
non negligible spectral gaps. We restate the jagged adiabatic path lemma. 

Lemma [21 Let {Hj}^~[° ly ^ be a sequence of bounded norm, simulatable Hamiltoni- 
ans on n qubits, with non-negligible spectral gaps and with groundvalues such that 
the inner product between the unique ground states a(Hj),a(Hj + x) is non negligible 
for all j. Then there is an efficient quantum algorithm that takes cy(Hq) to within 
arbitrarily small distance from ci(Ht)- 

Proof, (of lemmaEJ We replace the sequence {Hj} with the sequence of Hamiltonians 
{n^} where Uh is a projection on the space orthogonal to the groundstate of Hj, 
and we connect two neighboring projections by a line. We prove in claim using 
Kitaev's phase estimation algorithm, that the fact that Hj is simulatable implies 
that so is n^. Also, as projections, n ^. have bounded norms, || < 1. It follows 
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H3= 

(1 1 
1 -1) 




Figure 2: In the left side of the drawing we see two Hamiltonians H± and Hi connected by a 
straight line, and the spectral gaps along that line. In the right side of the drawing we see the same 
two Hamiltonians H\ and Hi connected through a jagged line that goes through a third connecting 
Hamiltonian H3 in the middle, and the spectral gaps along that jagged path. Note that on the left 
the spectral gap becomes zero in the middle, while on the right it is always larger than one. 



then, by the results mentioned in Section El that all the Hamiltonians on the path 
connecting these projections are simulatable, as convex combinations of simulatable 
Hamiltonians. 

We now have to show the Hamiltonians on the path have non negligible spectral 
gap. By definition Uh has a spectral gap equal to 1. It remains to show, however, 
that the Hamiltonians on the line connecting and n# i+1 have large spectral gaps, 
which we prove in the simple Claim [7| 

We can now apply the adiabatic theorem and get Lemma 121 Indeed, a linear 
time parameterization suffices to show that this algorithm satisfies the adiabatic 
condition. □ 

We now turn to the proofs of claims |H1 and [7| 

Claim 6. (Hamiltonian-to-projection lemma). Let H be a Hamiltonian on n 
qubits such that e~ tH can be approximated to within arbitrary polynomial accuracy 
by a polynomial quantum circuit, and let \\H\\ < m = poly(n). Let A (if) be non 
negligible, and larger than l/n c , and further assume that the groundvalue of H is 0. 
Then the projection Uh, is simulatable. 

Proof. We observe that Kitaev's phase estimation algorithm pffi 137] can be applied 
here to give a good enough approximation of the eigenvalue, and as the spectral 
gap is non-negligible we can decide with exponentially good confidence whether an 
eigenstate has the lowest eigenvalue or a larger eigenvalue. We therefore can apply 
the following algorithm: 

• Apply Kitaev's phase estimation algorithm to write down one bit of information 
on an extra qubit: whether an input eigenstate of H is the ground state or 
orthogonal to it. 
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• Apply a phase shift of value e~ lt to this extra qubit, conditioned that it is in the 
state |1) (if it is |0) we do nothing). This conditional phase shift corresponds 
to applying for time t a Hamiltonian with two eigenspaces, the ground state 
and the subspace orthogonal to it, with respective eigenvalues and 1, which is 
exactly the desired projection. 

• Finally, to erase the extra qubit written down, we reverse the first step and un- 
calculate the information written on that qubit using Kitaev's phase estimation 
algorithm again. 

□ 

We will also use the following basic but useful claim regarding the convex combi- 
nation of two projections. For a vector \a), the Hamiltonian H a = I — \a)(a\ is the 
projection onto the subspace orthogonal to a. We prove: 

Claim 7. Let \a) , \(3) be two vectors in some subspace, H a = I — \<y)(a\ and Hp = 
I — {(3\. For any convex combination H v = (1 — rj)(I — \a)(a\) +r)(I— \j3)(j3\, r\ G 
[0,1], of the two Hamiltonians H a ,Hp, A(H V ) > \(a\j3)\. 

Proof. To prove this, we observe that the problem is two dimensional, write \(3) = 
a\a) + bla- 1 -), and write the matrix if in a basis which contains |a) and la -1 ). The 
eigenvalues of this matrix are all 1 except for a two dimensional subspace, where the 
matrix is exactly 

( v\a\ 2 + (1 ~v) Vab* \ n7 , 
\ V a*b V\b\ 2 )' 1 } 

Diagonalizing this matrix we find that the spectral gap is exactly a/1 — 4(1 — r])rj\b\ 2 
which is minimized for 77 = 1/2 where it is exactly \a\. □ 

We use the tools we have developed to prove the equivalence of standard and 
adiabatic state generation complexity, and for generating interesting Markov chain 
states. We start with the equivalence result. 

7 Equivalence of Standard and Adiabatic State Generation 

Theorem El asserts that any quantum state that can be efficiently generated in the 
quantum circuit model, can also be efficiently generated by an adiabatic state gen- 
eration algorithm, and vice versa. We already saw the direction from adiabatic state 
generation to quantum circuits. To complete the proof of Theorem |21 we now show 
the other direction. 

Claim 8. let \<p) be the final state of a quantum circuit C with M gates, then there is a 
quantum adiabatic state generator which outputs this state, of complexity poly (n, M) . 
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Proof. W.l.o.g. the circuit starts in the state |0). We first modify the circuit so that 
the state does not change too much between subsequent time steps. The reason we 
need this will become apparent shortly. To make this modification, let us assume 
for concreteness that the quantum circuit C uses only Hadamard gates, Toffoli gates 
and Not gates. This set of gates was recently shown to be universal by Shi [43], and 
a simplified proof can be found in [3| (Our proof works with any universal set with 
obvious modifications.) We replace each gate g in the circuit by two ^fg gates. For 
y/g we can choose any of the possible square roots arbitrarily, but for concreteness 
we notice that Hadamard, Not and Toffoli gates have ±1 eigenvalues, and we choose 
VT = 1 and = i- We call the modified circuit C. Obviously C and C compute 
the same function. 

The path. We let M' be the number of gates in C. For integer < j < M', we set 

H x (jji) = I-\a x (j))Mj)\ 

where \a x (j)) is the state of the system after applying the first j gates of C on 
the input x. For s = ^r, 1] G [0, 1), define H x {s) = (1 - rj)H x {j) + V H x {j + 1). 

The spectral gaps are large. Clearly all the Hamiltonians H x (j) for integer < 
j < M', have non-negligible spectral gaps, since they are projections. We claim 
that for any state (3 and any gate ^/g, \(j3\y/g\{3)\ > Indeed, represent (3 as 
a\V\ + a 2 v 2 where V\ belongs to the 1-eigenspace of y/g and v 2 belongs to the 
i-eigenspace of ^fg. We see that K/Sly 7 ^!/?)] = | |ai| 2 + ^|a 2 | 2 |. As |ai| 2 + |a 2 | 2 = 1, 
a little algebra shows that this quantity is at least -j=. In particular, setting 

(3 = oc x (j) we see that \(a x (j)\a x (j + 1))| > -j=. It therefore follows by claim [7| 
that all the Hamiltonians on the line between H x (j) and H x (j + 1) have spectral 
gaps larger than 

The Hamiltonians are simulatable. Given a state \y) we can 

• Apply the inverse of the first j gates of C, 

• If we are in state \x, 0) apply a phase shift e~ l5 , and 

• Apply the first j gates of C 

which clearly implements e~ tSHx ^\ 

Adiabatic Condition is Satisfied. We have *g(s„) = /im^ H(so+c j~ H(so) . We 

ignore the finitely many points s = jp where j is an integer in [0, M'\. For all 
other points s, when ( goes to both H(sq + () and H(sq) belong to the same 
interval. Say they belong to the j'th interval, sq = < r\ < 1. Then, 

H{s ) = {l-r,)H x (j)+r,H x (j + l) 

H(s + C)=H( 3+ \l M ' C ) = (l-r,-M'OH x (j) + (ri + M'()H x (j + l) 
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It follows that H(s + C) - H(s ) = M'(H x (j + 1) - M'C,H x (j) and g(s„) = 
M' ■ [H x (j + 1) — H x {j)\. We conclude that ||g|| < 2M' and to satisfy Equation 
((HI) we just need to pick T = 0(*f). 



8 Quantum State Generation and Markov Chains 

Finally, we show how to use our techniques to generate interesting quantum states 
related to Markov chains. 

8.1 Markov chain Background 

We will consider Markov chains with states indexed by n bit strings. If M is an 
ergodic (i.e. connected, aperiodic) Markov chain, characterized with the matrix M 
operating on probability distributions over the state space, and p is an initial proba- 
bility distribution, then lim 4l >OQ pM l = it where tt is called the limiting distribution 

and is unique and independent of p. 

A Markov chain M has eigenvalues between —1 and 1. A Markov chain is said 
to be rapidly mixing if starting from any initial distribution, the distribution after 
polynomially many time steps is within e total variation distance from the limiting 
distribution tt. 5J shows that a Markov chain is rapidly mixing if and only if its 
second eigenvalue gap is non negligible, namely bounded from below by l/poly(n). 

A Markov chain is reversible if for the limiting distribution tt it holds that M[i, j] ■ 
7Tj = M[j, z] • iTj . We note that a symmetric Markov chain M is in particular reversible. 
Also, for an ergodic, reversible Markov chain M i\i > for all i. 

In approximate counting algorithms one is interested in sequences of rapidly mix- 
ing Markov chains, where subsequent Markov chains have quite similar limiting dis- 
tributions. For more background regarding Markov chains, see and references 
therein; For more background regarding approximate counting algorithms see |3Uj . 

8.2 Reversible Markov chains and Hamiltonians 

For a reversible M we define 



A direct calculation shows that M is reversible iff Hm is symmetric. In such a case 
we call Hm the Hamiltonian corresponding to M. The properties of Hm and M are 
very much related: 

Claim 9. If M is a reversible Markov chain, we have: 



□ 




(18) 
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• The spectral gap of Hm equals the second eigenvalue gap of M. 

• If it is the limiting distribution of M, then the ground state of Hm is cx.{Hm) = 
K> = Ei VW) V)- 

Proof. If M is reversible, H M is Hermitian and hence has an eigenvector basis. In 

particular / — Hm = V^MVn and so I — Hm and M have the same spectrum. It 
follows that if the eigenvalues of H M are {A r } then the eigenvalues of M are {1 — A r }. 
As a reversible Markov chain, M has norm bounded by 1. 

Also, if v r is an eigenvector of Hm with eigenvalue A r , then Diag(y/n)v r is 
the corresponding left eigenvectors of M with eigenvalue 1 — X r . In particular, 
Diag(^)a(HM) = 7r(M). It therefore follows that a(HM)i = or in short 

a(H M ) = k). □ 

This gives a direct connection between Hamiltonians, spectral gaps and ground- 
states on one hand, and rapidly mixing reversible Markov chains and limiting distri- 
bution on the other hand. 

8.3 Simulating Hm 

Not every Hamiltonian corresponding to a reversible Markov chain can be easily 
simulated. We will shortly see that the Hamiltonian corresponding to a symmetric 
Markov chain is simulatable. For general reversible Markov chains we need some 
more restrictions. We define: 

Definition 8. A reversible Markov chain is strongly samplable if it is: 

• row computable, and, 

• Given i,j G Q, there is an efficient way to approximate —. 

TTj 

Row computability holds in most interesting cases but the second requirement is 
quite restrictive. Still, we note that it holds in many interesting cases such as all 
Metropolis algorithms (see [22] )• It also trivially holds for symmetric M, where the 
limiting distribution is uniform. 

As Hm\i, j] = ■\f^M[i,j] we see that if M is strongly samplable then H M is 

row-computable. As Hm has bounded norm, the sparse Hamiltonian lemma implies: 

Corollary If a Markov chain M is a strongly samplable then Hm is simulatable. 

8.4 From Markov chains to Quantum Sampling 

We are interested in strongly samplable rapidly mixing Markov chains, so that the 
Hamiltonians are simulatable and have non negligible spectral gaps by claim To 
adapt this setting to adiabatic algorithms, and to the setting of the jagged adiabatic 
path lemma in particular, we now consider sequences of Markov chains, and define: 
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Definition 9. (Slowly Varying Markov Chains). Let {M t }J =1 be a sequence of 
Markov chains on Q, \Q\ = N = 2 n . Let w t be the limiting distribution of M t . We 
say the sequence is slowly varying if for all c > 0, for all large enough n, for all 
1 < t < T \ir t - | < 1 - l/n c . 

We prove that we can move from sequences of slowly varying Markov chains to 
Quantum sampling. We can now state Theorem El precisely. 

Theorem^ Let {M t }J =1 be a slowly varying sequence of strongly samplable Markov 
chains which are all rapidly mixing, and let ir t be their corresponding limiting dis- 
tributions. Then if there is an efficient Qsampler for \ttq), then there is an efficient 
Q sampler for |7r r ). 

Proof. We already saw the Hamiltonians B.M t are simulatable and have bounded 
norm. Also, as the Markov chains in the sequence are rapidly mixing, they have large 
spectral gaps, and therefore so do the Hamiltonians Llu t ■ To complete the proof we 
show that the inner product between the groundstates of subsequent Hamiltonians is 
non negligible, and then the theorem follows from the jagged path lemma. Indeed, 
(a(H Mt )\a(H Mt+1 )) = (7r f |7r t+ i) = £\ ^n t (i)ir t+1 (i) > 1 - \ir t - 7r t+1 | and therefore is 
non-negligible. □ 

Essentially all Markov chains that are used in approximate counting that we are 
aware of meet the criteria of the theorem. The following is a partial list of states 
we can Qsample from using Theorem^ where the citations refer to the approximate 
algorithms that we use as the basis for the quantum sampling algorithm: 

1. Uniform superposition over all perfect matchings of a given bipartite graph |2*§] . 

2. All spanning trees of a given graph [5]. 

3. All lattice points contained in a high dimensional convex body satisfying the 
conditions of [U]. 

4. Various Gibbs distribution over rapidly mixing Markov chains using the Metropo- 
lis filter 133] . 

5. Log-concave distributions 0. 

We note that most if not all of these states can be generated using other simpler 
techniques. However our techniques do not rely on self reducibility, and are thus qual- 
itatively different and perhaps extendible in other ways. We illustrate our technique 
with the example of how to Qsample from all perfect matchings in a given bipartite 
graph. We also note that if we could relax the second requirement in Definition |H] 
the techniques in this section could have been used to give a quantum algorithm for 
graph isomorphism. 
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8.5 Qsampling from Perfect Matchings 

In this subsection we heavily rely on the work of Sinclair, Jerrum and Vigoda [2H| 
who recently showed how to efficiently approximate a permanent of any matrix with 
non negative entries, using a sequence of Markov chains on the set of Matchings of 
a bipartite graph. The details of this work are far too involved to explain here fully, 
and we refer the interested reader to [2H] for further details. 

In a nutshell, the idea in [2H] is to apply a Metropolis random walk on the set of 
perfect and near perfect matchings (i.e. perfect matchings minus one edge) of the 
complete bipartite graph. Since [2H] is interested in a given input bipartite graph, 
which is a subgraph of the complete graph, they assign weights to the edges such 
that edges that do not participate in the input graph are slowly decreasing until the 
probability they appear in the final distribution practically vanishes. The weights of 
the edges are updated using data that is collected from running the Markov chain with 
the previous set of weights, in an adaptive way. The final Markov chain with the final 
parameters converges to a probability distribution which is essentially concentrated 
on the perfect and near perfect matchings of the input graph, where the probability 
of the perfect matchings is 1/n times that of the near perfect matching. 

It is easy to check that the Markov chains being used in are all strongly 
samplable, since they are Metropolis chains. Moreover, the sequence of Markov 
chains is slowly varying. It remains to see that can quantum sample from the limiting 
distribution of the initial chain that is used in [2H]- This limiting distribution is a 
distribution over all perfect and near perfect matchings in the complete bipartite 
graph, with each near perfect matching having weight n times that of a perfect 
matching, where n is the number of nodes of the given graph. Indeed, to generate 
this super-position we do the following: 

• We generate YI-k&s \ m ^)i where m in the matching on the bipartite graph in- 
duced by 7r G S n . We can efficiently generate this state because we can generate 
a super-position over all permutations in S n , and there is an easy computation 
from a permutation to a perfect matching in a complete bipartite graph and vice 
versa. 

• We generate the state |0) + \fn"^™ =1 K) normalized, on a login) dimensional 
register. This can be done efficiently because of the low- dimension. 

• We apply a transformation that maps \m,i) to |0,m) when 2 = 0, and to 
|0,m — {ci}) for % > 0, where m — {e^} is the matching m minus the i'th edge 
in the matching. There is an easy computation from m — {e^} to m, % and vice 
versa, and so this transformation can be done efficiently. We are now at the 
desired state. 

Thus we can apply Theorem ^ to Qsample from the limiting distribution of the 
final Markov chain. We then measure to see whether the matching is perfect or not, 
and with non negligible probability we project the state onto the uniform distribution 
over all perfect matchings of the given graph. 
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A Zeno effect approach to simulating adiabatic Generators 

Proof. (Of Claim |2I) We concentrate on a time interval [s ,Si], s < Si, where 
H(-) is continuous on [so> s i] an d differentiable on (s , Si). We denote r] max = 
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max se(s0)Sl) 11^0)11 and A min = min s6(s0)Sl) A(H(s)). We choose R > 9(%^e). 

min 

Notice that R is polynomially related to the schedule time T in the adiabatic condi- 
tion. 

We divide the interval [0, 1] to R time steps. At time step j, j = 1, . . . , R, we 
measure the state with a projective, orthogonal measurement that has the ground 
state of H(j^) as one of its answers. We begin at the state (0)). 

We need to show our procedure can be implemented efficiently, i.e., that if H is 
simulatable and has a non negligible spectral gap, then such a measurement can be 
implemented efficiently We also need to show our procedure is accurate, i.e., that 
under the condition of the adiabatic theorem, for the R we have chosen, with very 
high probability the final state is indeed a(H(l)). 

Accuracy : 

We first bound the relative change of H(s + 5) with respect to H(s). For s, s + 
5 e [s , Si], H{s + 5) - H{s) = j" +5 ^(s)ds and so \\H{s + 5) - H{s)\\ = 

\\ j: +s %(s)ds\\ < c 5 \ms)\\ds < v J x .s. 

Our next step is to claim that two Hamiltonians that are close to each other 
have close groundstates. This is captured in the following claim, that we prove 
later. 

Claim 10. Let H, J be two Hamiltonians \\H — J\\ < rj. Assume H, J have large 
spectral gaps: A(H),A(J) > A Then \ (a(H)\a(J)) \ > 1 - ff. 

Having that, we see that since \\H(^) — H(j^)\\ < Claim ITU1 asserts 

that the probability for successful projection at the j'th measurement, i.e. the 

2 

probability that the outcome is indeed the groundstate, is 1 — O ( Ja" ) ■ The 

min 

2 

probability we err at any of the R steps is therefore at most O ( J?^* ) which is 

min 

at most e by our choice of R. 
Efficiency : 

We use Kitaev's phase estimation algorithm [321 EZ] to give, with polynomially 
good confidence, a polynomially good approximation of the eigenvalue, and we 
then measure the eigenvalue. As the spectral gap is non- negligible, this in effect 
does an orthonormal measurement with the eigenstate subspace as one possible 
answer, as desired. The procedure is polynomial because H is simulatable and 
we can efficiently approximate e~ lHt for every polynomial t. 

□ 

We finish with the proof of Claim ITU1 

Proof. (Of Claim ITUJ) W.l.o.g we can assume H and J are positive, otherwise just 
add C ■ I to both matrices, for large enough constant C . This does not effect the 
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spectral norm of the difference, the spectral gaps or the inner product between the 
groundstates. 

Let {v{} be the H eigenvectors with eigenvalues Ai < . . . < Xn, and {u{}, {/x,} 
for J. Again, w.l.o.g, = Ai < /ii. Notice also that ji\ < \\ + rj, because ji\ = 
min„ : ||„|| = i \ Jv\, and |Ji>i| < \Hv±\ + |(J — H)vi\ < \\ + 77. 

So, I Jv±\ < Ai + rj. On the other hand, express i>i = au± + fe-uj_, with u±-Lui. 
Then, \ Jv\\ = \bJu± + a.Jui\ > \b\ ■ fi 2 — |o| • /Ui > |^| • (/^l + A) — \a\ ■ \i\ > \b\ ■ 
(Ai + A) — \a\ ■ (Ai + rj). Setting Ai = we get: rj > \b\ ■ A — \a\ • rj. Let us denote 
c——. We see that \a\ > c\b\ — 1. 

We now plug in \a I = y/l - |6| 2 , and square both sides of the inequality. We get 
1 _ | 6 |2 > 1 -2cj6j +c 2 \b\ 2 , i.e., |6|<^ 1 <g = 2. Equivalents, | |a(if 2 ))| = 

1(^1^)1 = | a | = ^/l - fftp > 1 - £ = 1 - as desired. □ 
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